#
# Sample OpenVPN configuration file for
# home using SSL/TLS mode and RSA certificates/keys.
#
# '#' or ';' may be used to delimit comments.

# Use a dynamic tun device.
# For Linux 2.2 or non-Linux OSes,
# you may want to use an explicit
# unit number such as "tun1".
# OpenVPN also supports virtual
# ethernet "tap" devices.
dev tun0
link-mtu 1256
# Our OpenVPN peer is the office gateway.
#remote nat.xsec.it
#remote vpn.xsec.it
remote 83.103.127.222
# 10.1.0.2 is our local VPN endpoint (home).
# 10.1.0.1 is our remote VPN endpoint (office).
ifconfig 10.8.0.2  10.8.0.1

# Our up script will establish routes
# once the VPN is alive.
up /etc/openvpn/upper.sh

# In SSL/TLS key exchange, Office will
# assume server role and Home
# will assume client role.
tls-client
# Certificate Authority file
ca /etc/openvpn/certs/xsec-cacert.pem

# Our certificate/public key
cert /etc/openvpn/certs/pietro.xsec.cert.pem

# Our private key
key /etc/openvpn/certs/pietro.xsec.cert.pem

# OpenVPN uses UDP port 5000 by default.
# Each OpenVPN tunnel must use
# a different port number.
# lport or rport can be used
# to denote different ports
# for local and remote.
port 1194
proto udp

#BACKUP
#port 443
#proto tcp-client

#http-proxy pasticcio 8080

# http-proxy 
# Downgrade UID and GID to
# "nobody" after initialization
# for extra security.
; user nobody
; group nobody

# If you built OpenVPN with
# LZO compression, uncomment
# out the following line.
comp-lzo
key-method 2
verb 4
keepalive 10 60